fittings-chem-pubchem-compound

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs include an explicit instruction to curl a .mjs script and run it (node call.mjs) — a direct download-and-execute from a non-major/unverified domain, which is a high-risk distribution pattern for malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Source text is the task input (“name”, “cid”, “smiles”) passed by the caller into the runtime request to PubChem PUG-REST via the chem.pubchem-compound endpoint; the agent does not automatically ingest arbitrary outsider-authored free text from a feed/inbox without the caller specifying a compound query.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill’s primary function is chemical data, but the documentation explicitly describes an on-chain/crypto payment flow: it requires providing a private key (FITTINGS_PRIVATE_KEY), signing an authorization, uses USDC on Base, and references EVM-related client libraries (@x402/evm). Those lines show the skill/client is designed to perform crypto signing/payment operations (wallet use and signing), which is direct financial execution capability.